Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7047AAC6C92611EF991496AD762E951A.roa
File: 7047AAC6C92611EF991496AD762E951A.roa (raw, json)
Hash identifier: msReLMTUYxul16NuVW6h96eqWllycvJIhAmnOY6PeG8=
Subject key identifier: 7C:A9:F8:43:0A:97:12:F1:79:21:82:34:E9:72:29:CF:4E:0E:8B:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013357
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7047AAC6C92611EF991496AD762E951A.roa
Signing time: Thu 02 Jan 2025 16:27:20 +0000
ROA not before: Thu 02 Jan 2025 16:27:16 +0000
ROA not after: Mon 13 Dec 2027 16:27:16 +0000
asID: 17561
IP address blocks: 154.222.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78679 (0x13357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:27:16 2025 GMT
Not After : Dec 13 16:27:16 2027 GMT
Subject: CN=6776be68-7bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:4e:69:de:92:79:de:59:6c:24:47:3d:ed:
0b:63:15:68:31:15:be:68:92:45:b6:de:c7:b8:7c:
94:74:2e:0e:d0:bf:a3:8e:41:e9:87:84:ab:e6:c6:
4a:bb:ae:bd:71:68:7b:45:3c:89:df:1e:f8:2c:ca:
b0:5f:5d:39:d3:0c:d1:bb:96:05:17:17:22:43:7b:
49:cf:b5:00:1c:d6:f1:41:5d:cf:85:4f:ee:c6:41:
e1:e2:4b:91:b8:1a:92:3e:cf:88:7e:b8:34:9b:bb:
67:18:9d:f1:26:5a:b3:06:4e:39:94:e5:ca:8a:1c:
90:56:9e:ba:8f:ba:9e:35:60:1f:7a:17:3e:6f:4d:
e6:41:ac:7f:3a:c3:da:df:66:1b:76:47:87:7d:70:
e5:e4:96:c9:92:a0:31:76:c3:39:a8:40:fb:20:8c:
07:72:7c:5f:bc:4b:d8:24:c9:e8:d4:e0:0e:51:21:
53:50:7c:ed:4d:f0:c2:78:10:dc:46:81:8d:0e:9b:
fc:20:d8:b0:88:f5:06:9e:02:1f:73:76:f8:1a:1b:
79:f8:33:00:f5:11:fc:90:81:b2:74:5b:ba:a6:a8:
7c:39:88:38:8e:4b:6c:1e:dd:5f:bb:f4:0b:7c:87:
3e:93:22:79:03:4a:27:17:c3:34:b1:5c:c6:15:2d:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A9:F8:43:0A:97:12:F1:79:21:82:34:E9:72:29:CF:4E:0E:8B:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7047AAC6C92611EF991496AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.117.0/24
Signature Algorithm: sha256WithRSAEncryption
67:cb:68:97:87:cc:1b:22:f8:69:3d:2f:1b:f1:96:d1:c9:42:
f0:8b:ae:9a:a7:a7:34:cd:be:69:78:c6:de:a2:f3:8b:b3:39:
5e:f5:55:1e:2c:a6:77:28:dc:bb:db:03:a8:05:1b:09:c3:d8:
21:8d:50:56:3d:70:23:64:e0:a2:48:ba:c6:37:64:fb:27:39:
4b:a4:45:01:87:60:30:94:68:fb:08:f1:fd:a7:71:73:98:1f:
f4:f0:f4:bd:da:d2:b3:e9:87:a3:82:6a:52:ca:1c:b5:ab:b1:
36:4c:7b:37:43:9a:ae:a5:43:98:e2:73:cd:14:43:ee:51:1e:
92:45:33:44:48:33:22:28:85:05:17:c2:15:b2:40:df:13:3b:
cd:8d:77:b6:ab:8b:a8:75:84:6d:ce:ff:35:12:fe:db:bf:66:
94:10:ad:20:50:d6:13:81:b0:0d:25:b0:16:73:e7:38:1b:ae:
73:64:a3:12:b9:4e:e4:f4:f5:06:d5:b2:b5:dc:a1:55:fe:45:
a9:4d:ba:37:86:c6:38:d0:ba:5c:0e:af:ae:70:cd:e6:80:c5:
2b:06:4e:02:52:6f:af:48:ba:a2:cf:af:33:92:ea:38:da:67:
1f:c0:c3:41:f8:91:cb:0e:b4:6e:88:89:5e:a9:41:43:a7:09:
d9:9e:2c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:14 2025 by rpki-client